New 'GoFetch' Vulnerability in Apple Silicon Exposes Encryption Keys
Researchers uncover a hardware-level flaw in Apple's M-series chips that cannot be patched, posing a potential risk to cryptographic data security.
- A newly discovered vulnerability in Apple Silicon, named 'GoFetch,' allows attackers to bypass encryption and access cryptographic keys.
- The flaw affects M1, M2, and M3 chips and is unpatchable due to its hardware-based nature, leaving current devices vulnerable.
- Researchers suggest software-based mitigations to reduce risk, but these could significantly impact performance.
- Intel's Raptor Lake CPUs also feature the DMP responsible for the vulnerability, but their implementation prevents the attack.
- The vulnerability recalls previous significant CPU flaws like Spectre and Meltdown, highlighting ongoing security challenges in chip design.